Isaca Certified Information Systems Auditor (CISA)

Which of the following is the GREATEST benefit of using file integrity monitoring (FIM) when securing critical systems?

An organization has determined that a trusted insider has been able to bypass controls and embezzle organizational funds. Which type of audit would be MOST helpful when providing evidence to law enforcement?

Which of the following is the BEST protection against forged email?

An IS auditor is reviewing an organization's disaster recovery plan (DRP) to determine whether operations can continue in the event of a disruption. Which of the following would provide the auditor with the BEST evidence confirming that the organization's plan is effective?

An organization saves confidential information in a file with password protection, and the file is placed in a shared folder. An attacker has stolen this information by obtaining the password through social engineering. Implementing which of the following would BEST enable the organization to prevent this type of incident in the future?

An IS auditor is examining cryptographic key management with a focus on ensuring the protection of cryptographic keys against modification and unauthorized disclosure. Which of the following should be reviewed FIRST?

Which of the following is the BEST indication of an effective problem management process?

Which of the following findings should be of GREATEST concern during an audit of IT governance and management?

A small business unit is implementing a control self-assessment (CSA) program and leveraging the internal audit function to test its internal controls annually. Which of the following is the MOST significant benefit of this approach?

Which of the following data controls is MOST helpful in verifying that the data received by an application is the same as the data sent by a remote application?

Which of the following would BEST help ensure data integrity during transmission?

Which of the following is MOST important when evaluating the design effectiveness of murti-factor authentication (MFA)?

A business application has crashed, and the database has been restored from backup. To ensure data integrity, which of the following will provide the BEST assurance?

Which of the following should be of GREATEST concern for an IS auditor when reviewing user account policies?

In which of the following system development life cycle (SDLC) phases would an IS auditor expect to find that controls have been incorporated into system specifications?

Which of the following is an IS auditor's BEST approach when low-risk anomalies have been identified?

Which of the following would be of GREATEST concern to an IS auditor reviewing continuous integration / continuous deployment (CI/CD) practices?

An organization's senior management thinks current security controls may be excessive and requests an IS auditor's advice on how to assess the adequacy Of current measures, What is the auditor's BEST recommendation to management?

A steering committee established to oversee an organization's digital transformation program is MOST likely to be involved with which of the following activities?

After validating the recovery time objective (RTO) for a time-critical system. which of the following should an IS auditor do NEXT to ensure the metric is aligned with the organization's disaster recovery goals?

Which of the following should be a concern to an IS auditor reviewing an organization's use of a major cloud provider for Infrastructure as a Service (IaaS)?

Which of the following controls is the BEST recommendation to prevent the skimming of debit or credit card data in point of sale (POS) systems?

Which of the following should be the GREATEST concern to an IS auditor evaluating an organization's policies?

An IS auditor is performing an audit of a large organization's operating system maintenance procedures. Which of the following findings presents the GREATEST risk?

Which of the following is the PRIMARY objective of enterprise architecture (EA)?

An organization has replaced its can center with Al chatbots that autonomously learn new responses through internet queries and customer conversation history. Which of the following would an IS auditor tasked with verifying IT controls consider to be the GREATEST risk?

Which of the following BEST enables an organization's information security team to correlate and aggregate log files from different sources?

During a network security audit: which of the following would an IS auditor consider to be the GREATEST risk?

Which of the following would MOST likely be detailed in an audit charter?

The PRIMARY objective of performing a post-implementation review is to verify that the system is:

An IS auditor is reviewing an organizations recently adopted generative Al system. which requires large amounts of data that may include personal information Which of the following BEST mitigates data privacy risk related to generative Al?

Which of the following is the MOST important consideration when evaluating the data retention policy for a global organization with regional offices in multiple countries?

In planning a major system development project, function point analysis would assist in:

An IS auditor has traced the source of a transaction fraud to the desktop system of an e-business staff member who is on leave. Which of the following is the BEST way for the auditor to

ensure the success of the investigation?

In response to a finding that several vendor-supplied security fixes had not been applied to a business-critical application. management has agreed to apply all the security patches- During follow-up procedures, which of the following is MOST important for the IS auditor to verify?

When utilizing attribute sampling, which of the following would cause the sample size to increase?

Which of the following is the GREATEST benefit of an operational log management system?

An organization's email service is hosted by a third pat-M and the service level agreement (SLA) requires 99.9% availability. An IS auditor finds that the service has not met its availability level for the past five months, Which of the following is the auditor's BEST recommendation?

Which of the following is the PRIMARY objective when encrypting a database?

After reviewing an organization's patching policy and process documentation. an IS auditor identifies unpatched Internet of Things (IoT) devices. Which of the following should the auditor do FIRST to determine the root cause?

The PRIMARY benefit of using a statistical sampling method in an IS audit is to:

An IS auditor finds a user account where privileged access is not appropriate for the user's role. Which of the following would provide the BEST evidence to determine whether the risk of this access has been exploited?

Which of the following is PRIMARILY used in data loss prevention (DLP) solutions to prevent the unauthorized transfer of sensitive data over email?

Which of the following should an IS auditor verify FIRST when reviewing operational resilience?

During a business impact analysis (BIA) exercise. it was identified that a business process is highly dependent on a particular IT system. Which of the following is the MOST important consideration in this situation?

Robotic process automation (RPA) tools have been implemented to automate manual processes across an organization. Which of the following is the BEST recommendation to address concerns regarding which processes should be automated?

An organization is disposing of a system containing sensitive data and has deleted all files from the hard disk. An IS auditor should be concerned because:

An organization is implementing a new enterprise resource planning (ERP) system. From a system performance management perspective.

Which Of the following would pose the GREATEST concern for an IS auditor?

Which of the following would be of GREATEST concern to an IS auditor providing support to a financial audit team?

In which of the following situations would an IS auditor MOST likely utilize data analytics?

In the context of audit algorithms. which of the following is a characteristic of a supervised learning model?

Which of the following can only be provided by asymmetric encryption?

During the forensic investigation of a cyberattack involving credit card data: which of the following is MOST important to ensure?

A core system fails a week after a scheduled update, causing an outage that impacts service. Which of the following is MOST important for incident management to focus on when addressing

the issue?

An organization uses an Al-driven file scanning solution to detect malware in incoming email attachments. Which of the following is MOST important for an IS auditor to assess?

An IS auditor is reviewing vulnerability scanning results of an organizations critical systems. Which of the following is the BEST way to validate that the vulnerabilities have been remediated

Which of the following non-audit activities may impair an IS auditor's independence and objectivity?

Based on best practice, which types of accounts should be disabled for interactive login?

Which of the following is MOST important to consider when developing a service level agreement (SLA)?

During a follow-up audit, an IS auditor learns that management has deferred the implementation of a previously agreed-upon recommendation. What js the responsibility of the auditor?

The PRIMARY objective of the disaster recovery planning process is to:

An IS auditor evaluating the resilience of a network with a high-availability requirement should be MOST concerned if:

Which of the following controls BEST ensures the integrity of data exchanged between two systems?

During the review of a system disruption incident, an IS auditor notes that IT support staff were put in a position to make decisions beyond their level of authority. Which of the following is the

BEST recommendation to help prevent this situation in the future?

An IS auditor finds that the access-controlled doors to a work area are kept unlocked during power outages. Which of the following is the auditor's BEST course of action?

Which of the following is MOST important for an IS auditor to ensure is in place for protecting APIs?

Which of the following sampling methods is MOST appropriate when assessing a population to focus on specific risk areas?

To reduce operational costs, IT management plans to reduce the number of servers currently used to run business applications. Which of the following is MOST helpful to review when identifying which servers are no longer required?

Which of the following is the BEST way for an organization to reduce its risk associated with the collection and protection of personal information?

Which of the following poses the GREATEST risk to an organization that is rapidly scaling its use of robotic process automation (RPA)?

Which cloud deployment model is MOST likely to be customizable?

An IS auditor is providing input to an RFP to acquire a financial application system- Which of the following is MOST important for the auditor to recommend?

The quality assurance (QA) team is testing a new e-ticketing application prior to go live to ensure that sales tax is calculated and applied correctly.

Which of the following should be Of GREATEST concern?

Visitors to a data center are required to present an ID and pre-approved documents. Which type of control has been implemented?

Which of the following would be of GREATEST concern to an IS auditor reviewing an organization's disaster recovery plans (DRPs)?

Which of the following is MOST important when assembling an internal team to perform penetration testing for the organization?

An IS auditor is reviewing an organization's cloud access security broker (CASB) solution- Which of the following is MOST important for the auditor to verify?

When reviewing an organization's enterprise architecture (EA): which of the following is an IS auditor MOST likely to find within the EA documentation?

An IS auditor is reviewing documentation for an IT department procedure for adding a firewall rule. Which of the following should be of GREATEST concem to the IS auditor?

Which of the following is MOST important to consider when developing a business continuity plan (BCP)?

An IS auditor is reviewing the business continuity plan (BCP) for a business unit and notes an approved cloud service defined in the list of processes. Which of the following wouId be the auditor’s GREATEST concern?

Which of the following is MOST important for an IS auditor to review prior to the migration of acquired software into production?

A disaster recovery plan (DRP) should include steps for:

An IS auditor validates data extracted from an enterprise resource planning (ERP) system to ensure the data meets financial industry standards. Which type of audit is being conducted?

Which of the following groups would be MOST appropriate to participate in a security training that includes detailed information about the operation of technical security controls?

Which of the following reliably associates users with their public keys and includes attributes that uniquely identify the users?

Which of the following should be the PRIMARY focus for any network design that deploys a Zero Trust architecture?

An IS auditor is evaluating the risk associated with moving from one database management system (DBMS) to another. Which of the following would be MOST helpful to ensure the integrity of the system throughout the change?

Which of the following would be an IS auditor's GREATEST concern when reviewing an organization's implementation of a forensic readiness plan?

The FIRST step in an incident response plan is to:

Which of the following is the MOST important consideration when designing IT controls?

Which of the following features would BEST address risk associated with data at rest when evaluating a data loss prevention (DLP) solution?

An organization is integrating two systems for real-time API communication. Which of the following is the BEST approach to ensure secure authentication between the two applications before going live?

In operational log management, which of the following BEST ensures the availability of log data?

Which of the following controls is MOST effective for discovering unauthorized cloud service usage in an organization's corporate network?

Which of the following is MOST important for an IS auditor to consider when reviewing a data retention policy?

An IS auditor observes that a large number of departed employees have not been removed from the accounts payable system. Which of the following is MOST important to determine in order to assess the risk?

An IS auditor is reviewing the system development practices of an organization that is about to move from a Waterfall to an Agile approach.

Which of the following is MOST important for the auditor to focus on as a result of this move?

Which of the following activities should be separated in an organization's incident management processes?

Which of the following should an IS auditor be MOST concerned with when reviewing the IT asset disposal process?